926cd4d6ac878d69947dd4049810d2bb6ced47761cb30ad1cabfb832012caadf

General

Target

926cd4d6ac878d69947dd4049810d2bb6ced47761cb30ad1cabfb832012caadf
Size

11KB
MD5

474d50ce4e6fd06459c49f307147646d
SHA1

e538f67c671d140b00bb44fdb2ff18b9539a7aa0
SHA256

926cd4d6ac878d69947dd4049810d2bb6ced47761cb30ad1cabfb832012caadf
SHA512

4ad70c122a10440ed09eac559e0c5118a00fb2ad809fb6b8d43074800c8a6bde6b09c0a17e10d76249ddaba875dddc8fd5f94a968ffc75191562244b1f7ffa29
SSDEEP

192:QGoLHPEFAlBWctWJmI5jO/vqJz92SCxSMVnOaNL:QGxA94JmAjSo92fxtnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
926cd4d6ac878d69947dd4049810d2bb6ced47761cb30ad1cabfb832012caadf

Files

926cd4d6ac878d69947dd4049810d2bb6ced47761cb30ad1cabfb832012caadf
.dll windows x86

ff0cf5c4f818a4e6cadfe5a4e0d00b4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

free
calloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit
_initterm_e

Exports

Exports

PyInit__RIPEMD160
ripemd160_copy
ripemd160_destroy
ripemd160_digest
ripemd160_init
ripemd160_update

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff0cf5c4f818a4e6cadfe5a4e0d00b4b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 400B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 400B